From owner-freebsd-ports@FreeBSD.ORG Tue Nov 10 18:12:47 2009 Return-Path: Delivered-To: ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 7C1D81065692 for ; Tue, 10 Nov 2009 18:12:47 +0000 (UTC) (envelope-from rwmaillists@googlemail.com) Received: from ey-out-2122.google.com (ey-out-2122.google.com [74.125.78.25]) by mx1.freebsd.org (Postfix) with ESMTP id D53A88FC23 for ; Tue, 10 Nov 2009 18:12:46 +0000 (UTC) Received: by ey-out-2122.google.com with SMTP id 9so64197eyd.9 for ; Tue, 10 Nov 2009 10:12:45 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=gamma; h=domainkey-signature:received:received:date:from:to:subject :message-id:in-reply-to:references:x-mailer:mime-version :content-type:content-transfer-encoding; bh=l/JD9Zr98Cc0MielLm5p9orN6WCvryKxwGeJkYsLfxw=; b=mjYY0Hcev1E50iNqVIue9nnRqojJfuas6w9XOgk8iqCLwbhvRlezWyBFQc+ut6l72N FNwPDpAm/H+QGtM+sTvmRSo03+52fI1Tsfsl1MQUMYPsvlYP2C/vZnBBylgELs0D+5hT 7X7zRl3EgWlwFUumj2SWR5QrInOeOVATWWBg4= DomainKey-Signature: a=rsa-sha1; c=nofws; d=googlemail.com; s=gamma; h=date:from:to:subject:message-id:in-reply-to:references:x-mailer :mime-version:content-type:content-transfer-encoding; b=T/bMsja1LS0eCe0RmZyk7lCMxHo6laMdRNlTAbW9loRM4h7xvpf4Dvl39Jq7lBWzO1 n68A8bTjOuFyi8T8VSc4aZULHgNvL3NAXspONJq/xPI3I8FfGnKjANpvTwXi0phdvxyk qfEZbvw5qj8jcMV3vdcrhHjZ2fTj544rcYxFI= Received: by 10.213.26.140 with SMTP id e12mr5430613ebc.0.1257876765503; Tue, 10 Nov 2009 10:12:45 -0800 (PST) Received: from gumby.homeunix.com (bb-87-81-140-128.ukonline.co.uk [87.81.140.128]) by mx.google.com with ESMTPS id 5sm2289086eyh.34.2009.11.10.10.12.42 (version=SSLv3 cipher=RC4-MD5); Tue, 10 Nov 2009 10:12:43 -0800 (PST) Date: Tue, 10 Nov 2009 18:12:40 +0000 From: RW To: ports@freebsd.org Message-ID: <20091110181240.33a78db4@gumby.homeunix.com> In-Reply-To: <20091110103228.GA1139@straylight.m.ringlet.net> References: <4AF897A4.3070408@delphij.net> <20091109225232.GA34294@lor.one-eyed-alien.net> <20091110103228.GA1139@straylight.m.ringlet.net> X-Mailer: Claws Mail 3.7.2 (GTK+ 2.16.6; i386-portbld-freebsd7.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: Subject: Re: RFC: svn for make fetch X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Nov 2009 18:12:47 -0000 On Tue, 10 Nov 2009 12:32:28 +0200 Peter Pentchev wrote: > The Ports Collection's distfile checksums make sure that you get > exactly the same files *as the port maintainer examined at some > previous moment in time*. More importantly it guards against maliciously modified source code. Someone might break into a legitimate mirror or use dns poisoning to distribute malware.